Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aU47bTyFgdD7sB7oNftOjeIhGg8.cer
File: aU47bTyFgdD7sB7oNftOjeIhGg8.cer (raw, json)
Hash identifier: WYfceHHVl7iGg+tXJJU7puPSAy1RyEhCdllp9eyZ72c=
Subject key identifier: 69:4E:3B:6D:3C:85:81:D0:FB:B0:1E:E8:35:FB:4E:8D:E2:21:1A:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DDF9E98F33EC3512F982B03E0EF4E9F02
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/ade42b-fdce-4b4d-88ac-406b3614e0b2/1/aU47bTyFgdD7sB7oNftOjeIhGg8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/ade42b-fdce-4b4d-88ac-406b3614e0b2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 30 Apr 2026 18:20:06 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 34764
IP: 185.16.111.0/24
IP: 193.28.153.0/24
IP: 2a02:ff80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:df:9e:98:f3:3e:c3:51:2f:98:2b:03:e0:ef:4e:9f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 30 18:20:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=694e3b6d3c8581d0fbb01ee835fb4e8de2211a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:f7:d7:21:14:d5:8b:c8:38:bc:35:73:56:
02:ff:5e:f0:fc:84:76:59:58:11:8a:fc:1d:37:45:
a1:89:21:3a:4e:c8:e0:15:25:1b:31:70:0a:2b:ed:
fe:0d:6d:01:98:02:05:5b:e1:48:57:0f:42:f6:f9:
bf:5a:de:93:54:31:12:5b:f2:d9:43:63:aa:54:ab:
a4:63:20:bd:cc:b2:0b:b9:f8:85:57:b8:45:c4:88:
be:ca:47:3a:5e:74:21:b1:0e:66:54:ea:59:56:51:
01:18:71:8c:52:08:04:9b:09:b8:13:3e:5f:2c:b9:
02:10:8b:90:65:56:71:3e:a4:28:a8:b5:17:80:ab:
88:3f:3f:84:48:c0:a4:ef:d8:87:be:c0:56:65:92:
10:ae:eb:0f:98:54:dc:ba:aa:54:c6:f3:f7:4e:ce:
5b:9c:c2:02:0e:cb:aa:1a:51:1f:e7:72:1a:86:1b:
a8:87:cb:81:d5:f3:b9:d8:b5:a9:3a:59:12:37:10:
6e:0b:87:ac:68:2e:0c:0c:9e:c4:15:80:4a:75:cb:
1a:1d:29:03:ec:24:52:87:82:bd:05:98:c0:44:96:
5e:b3:3f:e2:95:44:8d:5c:f0:85:51:42:94:da:e5:
c0:3c:66:b2:75:99:b4:01:63:bb:cc:5a:97:59:cc:
e6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4E:3B:6D:3C:85:81:D0:FB:B0:1E:E8:35:FB:4E:8D:E2:21:1A:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ade42b-fdce-4b4d-88ac-406b3614e0b2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ade42b-fdce-4b4d-88ac-406b3614e0b2/1/aU47bTyFgdD7sB7oNftOjeIhGg8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.111.0/24
193.28.153.0/24
IPv6:
2a02:ff80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34764
Signature Algorithm: sha256WithRSAEncryption
68:c2:ea:43:fb:eb:04:6f:80:8b:2b:61:77:83:26:ea:5f:28:
d6:64:4e:91:07:8a:1b:af:dd:d4:b4:15:82:d9:af:31:9d:84:
9f:7b:73:a8:46:85:04:d6:93:2e:1b:86:99:16:0e:e9:f9:1f:
ec:f9:b2:fa:fe:c8:ba:ce:45:7e:66:07:48:b8:1a:4d:11:9a:
7a:9d:e7:34:25:b4:cb:8c:16:e8:ce:da:99:85:13:64:44:b1:
9e:0f:c2:26:de:8c:aa:c6:af:ef:00:98:a8:69:a5:c0:b0:af:
6a:0c:ec:ea:ce:9f:56:2d:29:ef:cd:46:ae:fe:a1:46:fa:6a:
fc:32:27:ac:9d:8a:45:0f:22:a7:3b:13:c1:41:00:5b:87:02:
08:5b:35:84:83:49:89:1a:33:88:04:fc:02:12:d8:e3:de:6d:
0b:69:cd:fb:b4:e1:d9:59:be:fb:7c:ec:e3:74:8d:73:af:a2:
70:b1:6a:c9:17:64:ef:56:d9:80:38:25:05:1c:ad:05:eb:23:
a1:e4:b2:c9:66:31:e0:c0:64:ed:16:21:4c:ec:71:d0:ef:f2:
75:5a:2d:52:bd:dc:5b:20:c0:76:dc:a4:19:ec:25:f9:7a:60:
1b:89:ee:5a:53:ca:2e:c6:f0:ec:51:cf:dc:54:91:7d:d9:99:
47:c0:2b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:48:57 2026 by rpki-client